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Amendments to the Claims: 

A listing of the entire set of pending claims (including amendments to the claims, if any) 
is submitted herewith per 37 CFR 1.121, This listing of claims will replace all prior versions, 
and listings, of claims in the application. 

Listing of Claims: 

1 . (currently amended) A secure communication system including 
a source device and 

at least one sink device; information being transferred ftom the source device to the sink 
device in a communication session including the transfer of a plurality of packets fix>m the source 
device to the sink device; each packet including a data field for transferring a portion of the 
information; 

the source device including: 

a key generator for, at the initiative of tiie source deface, generating an active 
source session key in a predetermined sequence of source session keys Ksourcei; 

an encryptor for encrypting at least part of the data field of a packet under control 
of the active source session key; the encrypted part of the data field including a sub-field 
designated as a key check block field gjjat contai ns a ke y check block such that a plain^text form 
of the key check block is a data block agreed between the source and sink devices before startmg 
the transfer of the inf nnnatinn-' 
the sink device including: 

a key generator for generating a plurality of candidate sink session key in a 
predetermined sequence of sink session keys Ksinki, where for each index i in the sequence the 
respective sink session key Ksinki corresponds to the respective source session key Ksourc^ei; 

a decryptor for decrypting at least part of the data field of a received packet under 
control of a sink session key; 

a key resolver operative 

to determine wiiich of the candidate sink session keys corresponds to the 
source session key used to encrypt the encrypted part of a received packet, by causii^ the 
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decryptor to decrypt the data in the key check block field of the received packet under control of 
a different one of the plurality of candidate sink session keys until a valid decryption result is 
found; and 

to cauise the decryptor to decrypt a remaining encrypted part of the data 
field of the packet under control of the candidate sink session key which produced the valid 
decryption result 

2- (Original) A secure communication system as claimed in claim 1, wherein 

the plain-text form of the key check block in the key check block field is a public data 

block. 

3. (currently amended) A secure communication system as claimed in claim 1, wherein 

the plain-text form of the key check block in the key check block field is a ^ data block 
fl ffwd botween th e Dourp e- ond s ink d e vic e b e for e s tortir>g th e tran s fer - of flw-infogmati M9rm^ 
used for the entire commxmication session. 

4. (Original) A secure commxmication system as claimed in claim 1, wherein 

the plaintext form of the key check block in the key check block field changes at least 
once during the communication session. 

5. (Original) A secure communication system as claimed in claim 4, wherein 

the source and sink device include corresponding key check block generators for 
generating the plain-text form of the key check block and effecting the change of the plain-text 
form of the key check block, 

6. (Original) A secure communication system as claimed in claim 4, %\iierein 

the plain-text form of the key check block of a particular packet is derived jfcom 
mformation transferred in a packet preceding the particular packet 

7. (Original) A secure communication system as claimed in claim 6, wherein 
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the plain-text fonn of the key check block is derived from infonnation transferred in a 
packet immediately preceding the particxilar packet. 

8. (Previously presented) A seciire communication system as claimed in claim 6, wherein 

the plaia-text form of the key check block of a particular packet is identical to the plain- 
text form of a predetermined data block, other than the key check block, in an encrypted part of 
the data field of a packet preceding the particular packet. 

9. (currently amended) A sink device for use in a secure communication system vAierein a source 
device autonomously can change a source session key used for encrypting at least part of the data 
field of a packet transferred fix>m the source device to the sink device; the encrypted part of the 
data field including a sub-afield designated as a key check block field; the sink device including: 

a key generator for generating a plurality of candidate sink session key in a predetermined 
sequence of sink session keys Ksinki, where for each index i ia the sequence the respective sink 
session key Ksinki corresponds to the respective source session key Ksourcei; 

a decryptor for decrypting at least part of the data field of a received packet under control 
of a sink session key; and 

a key resolver operative 

to determine which of the candidate sink session keys corresponds to the source 
session key used to encrypt the encrypted part of a received packet, by causing the decryptor to 
decrypt the data in the key check block field of the received packet under control of a different 
one of the plurality of candidate sink session keys until a valid decryption result is foun d, the key 
check block field containing a kev check block such that a plain-text form of the key check block 
is a data block affleed between the source and sink devices before starting the transfer of the 
information : and 

to cause the decryptor to decrypt a remaining encrypted part of the data field of 
the packet under control of the candidate sink session key which produced the valid decryption 
result 
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10. (currently amended) A method of secure communication between a soxnxe device and at least 
one sit* device; infomialion being transfened from the source device to the sink device in a 
communication session including the transfer of a plurality of packets from the source device to 
the sink device; each packet inclxtding a data field for transferring a portion of the information; 

the method including: 

at the initiative of the source device generating an active source session key in a 
predetermined sequence of source session keys Ksourcci; 

encrypting at least part of the data field of a packet under control of the active source 
session key; the encrypted part of the data field including a sub-field designated as a key check 
block fi^lH ^h5>t gnntamia a k ey check block such that a plain-tR xt form of the kev check block is a 
data block agreed between the source and sink devices before starting the frangfer nf ihe 
information: 

transferring the packet fit)m the source device to the sink device; 

generating a plurality of candidate sink session key in a predetermined sequence of sink 
session keys Ksirikb where for each index i in the sequence the respective sink session key Ksinki 
corresponds to the respective source session key Ksource-,; 

determining y/hich of the candidate sink session keys corresponds to the source session 
key used to encrypt the encrypted part of a received packet, by decrypting the data in the key 
check block field of the received packet under control of a difiFerent one of the plurality of 
candidate sink session keys until a valid decryption result is found; and 

decrypting a remaining encrypted part of the data field of the packet under control of the 
candidate sink session key vMch produced the valid decryption result 

1 1 . (Previously presented) A method of in a sink device in a secure communication system 
detecting a change of a session key effected by a source device in the system; information being 
transferred from the source device to the sink device in a communication session including the 
transfer of a plurality of packets fipom the source device to the sink device; each packet including 
a data field for transfieiring a portion of the infomiation; at least part of the data field of a packet 
being encrypted under control of an active source session key in a predetermined sequence of 
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source session keys Ksourcei; the encrypted part of the data field including a sub-field designated 
as a key check block field; the method including: 

generating a plurality of candidate sink session key in a predetermined sequence of sink 
session keys Ksinki, where for each index i in the sequence the respective sink session key Ksinkj 
corresponds to the respective source session key Ksourcei; 

determining which of the candidate sink session keys corresponds to the source session 
key used to encrypt the encrypted part of a received packet, by decrypting the data in the key 
check block field of the received packet under control of a different one of the plurality of 
candidate sink session keys until a valid decryption result is foun d, the key check block field 
rrtTiteifiinp; a key chcck block such that a plfli'n-text foTm of the key check block is a data block 
agreed between the source and sink devices before starting the transfer of the information: and 

decrypting a remaining encrypted part of the data field of the packet xmder control of the 
candidate sink session key which produced the valid decryption result. 

12. (Original) A computer program product where the program product is operative to cause a 
computer to perform the method of claim 1 L 
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